CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product redhat:rhel_e4s. Show all products

152 CVEs, showing 101 to 150PreviousPage 3 of 4Next
CVESeverityTitlePublished
CVE-2026-33845High 7.5Gnutls: gnutls: denial of service via dtls zero-length fragment
Assigned by redhat
Apr 30, 2026
CVE-2026-3833Medium 6.5Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
Assigned by redhat
Apr 30, 2026
CVE-2026-31488High 7.8drm/amd/display: Do not skip unrelated mode changes in DSC validation
Assigned by Linux
Apr 22, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-31419High 7.8net: bonding: fix use-after-free in bond_xmit_broadcast()
Assigned by Linux
Apr 13, 2026
CVE-2026-34486
Known exploited
High 7.5Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
Assigned by apache
Apr 9, 2026
CVE-2026-4878Medium 6.7Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Assigned by redhat
Apr 9, 2026
CVE-2026-21413Critical 9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.
Assigned by talos
Apr 7, 2026
CVE-2026-31402Critical 9.8nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
Assigned by Linux
Apr 3, 2026
CVE-2026-4800High 8.1lodash vulnerable to Code Injection via `_.template` imports key names
Assigned by openjs
Mar 31, 2026
CVE-2026-5121High 7.5Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Assigned by redhat
Mar 30, 2026
CVE-2026-4424High 7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Assigned by redhat
Mar 19, 2026
CVE-2026-27135High 7.5nghttp2 Denial of service: Assertion failure due to the missing state validation
Assigned by GitHub_M
Mar 18, 2026
CVE-2026-4111High 7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Assigned by redhat
Mar 13, 2026
CVE-2026-3497Low 2.7Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
Assigned by canonical
Mar 12, 2026
CVE-2025-14831Medium 5.3Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Assigned by redhat
Feb 9, 2026
CVE-2025-15467High 8.8Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Assigned by openssl
Jan 27, 2026
CVE-2025-13465Medium 6.9Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Assigned by openjs
Jan 21, 2026
CVE-2025-14512Medium 6.5Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Assigned by redhat
Dec 11, 2025
CVE-2025-14087Medium 5.6Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Assigned by redhat
Dec 10, 2025
CVE-2025-13947High 7.4Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
Assigned by redhat
Dec 3, 2025
CVE-2025-61662High 7.8Grub2: missing unregister call for gettext command may lead to use-after-free
Assigned by redhat
Nov 18, 2025
CVE-2025-11234High 7.5Qemu-kvm: vnc websocket handshake use-after-free
Assigned by redhat
Oct 3, 2025
CVE-2025-9566High 8.1Podman: podman kube play command may overwrite host files
Assigned by redhat
Sep 5, 2025
CVE-2025-31277
Known exploited
High 8.8The issue was addressed with improved memory handling.
Assigned by apple
Jul 29, 2025
CVE-2025-6395Medium 6.5Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
Assigned by redhat
Jul 10, 2025
CVE-2025-7425High 7.8Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Assigned by redhat
Jul 10, 2025
CVE-2025-32989Medium 5.3Gnutls: vulnerability in gnutls sct extension parsing
Assigned by redhat
Jul 10, 2025
CVE-2025-32988Medium 6.5Gnutls: vulnerability in gnutls othername san export
Assigned by redhat
Jul 10, 2025
CVE-2025-5987High 8.1Libssh: invalid return code for chacha20 poly1305 with openssl backend
Assigned by redhat
Jul 7, 2025
CVE-2025-6020High 7.8Linux-pam: linux-pam directory traversal
Assigned by redhat
Jun 17, 2025
CVE-2025-49794Critical 9.1Libxml: heap use after free (uaf) leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6170Low 2.5Libxml2: stack buffer overflow in xmllint interactive shell command handling
Assigned by redhat
Jun 16, 2025
CVE-2025-49796Critical 9.1Libxml: type confusion leads to denial of service (dos)
Assigned by redhat
Jun 16, 2025
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2025-5914High 7.8Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Assigned by redhat
Jun 9, 2025
CVE-2025-5222High 7.0Icu: stack buffer overflow in the srbroot::addtag function
Assigned by redhat
May 27, 2025
CVE-2025-4373Medium 4.8Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
Assigned by redhat
May 6, 2025
CVE-2024-8176High 7.5Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Assigned by redhat
Mar 14, 2025
CVE-2025-0624High 7.6Grub2: net: out-of-bounds write in grub_net_search_config_file()
Assigned by redhat
Feb 19, 2025
CVE-2024-12243Medium 5.3Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-12133Medium 5.3Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Assigned by redhat
Feb 10, 2025
CVE-2024-11218High 8.6Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
Assigned by redhat
Jan 22, 2025
CVE-2024-12085High 7.5Rsync: info leak via uninitialized stack contents
Assigned by redhat
Jan 14, 2025
CVE-2024-9355Medium 6.5Golang-fips: golang fips zeroed buffer
Assigned by redhat
Oct 1, 2024
CVE-2024-6409High 7.0Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
Assigned by redhat
Jul 8, 2024
CVE-2024-6387High 8.1Openssh: regresshion - race condition in ssh allows rce/dos
Assigned by redhat
Jul 1, 2024
CVE-2024-1394High 7.5Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Assigned by redhat
Mar 21, 2024
CVE-2023-5178High 8.8Kernel: use after free in nvmet_tcp_free_crypto in nvme
Assigned by redhat
Nov 1, 2023
CVE-2023-42753High 7.0Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Assigned by redhat
Sep 25, 2023
PreviousPage 3 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.